Skip to content
brandefense.io
Request A Demo
Nation-state APTEspionage

ItaDuke

ItaDuke is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Defense and Aerospace sector in 8 countries, including Russia and Iran.

Also known as
  • DarkUniverse
  • SIG27
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2017
Record updated

Who They Target.

Sectors · 1
Countries · 8

About ItaDuke.

ItaDuke is an actor known since 2013. It used PDF exploits for dropping malware and Twitter accounts to store C2 server urls.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.